[jboss-jira] [JBoss JIRA] (WFLY-7831) Coverity: default platform encoding used in TokenRealmDefinition (Elytron subsystem)
Darran Lofthouse (JIRA)
issues at jboss.org
Thu Jan 19 16:52:00 EST 2017
[ https://issues.jboss.org/browse/WFLY-7831?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Darran Lofthouse updated WFLY-7831:
-----------------------------------
Fix Version/s: 11.0.0.Alpha1
> Coverity: default platform encoding used in TokenRealmDefinition (Elytron subsystem)
> ------------------------------------------------------------------------------------
>
> Key: WFLY-7831
> URL: https://issues.jboss.org/browse/WFLY-7831
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Reporter: Josef Cacek
> Assignee: Ilia Vassilev
> Priority: Minor
> Labels: static_analysis
> Fix For: 11.0.0.Alpha1
>
>
> Coverity static-analysis scan found a String to byte conversion with default platform encoding in the {{TokenRealmDefinition.performRuntime}} method.
> https://scan7.coverity.com/reports.htm#v16159/p12663/fileInstanceId=6892114&defectInstanceId=1794526&mergedDefectId=1388485&eventId=1794526-0
> Following code
> {code:java}
> jwtValidatorBuilder.publicKey(publicKey.getBytes());
> {code}
> The encoding should be specified as argument.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list